chimex[.]com[.]mx

Analysis of chimex.com.mx indicates active brand impersonation targeting MEXC, a cryptocurrency exchange. The domain was registered on June 8, 2026, and currently resolves to 104.37.183.1, hosted under NuCDN LLC in the United States. Infrastructure review shows a Let's Encrypt SSL certificate (R13) and an MX record pointing to mail.chimex.com.mx, suggesting email capabilities that may be used for phishing or credential harvesting. The page title, 'CHIMEX OIL & GAS SA DE CV,' does not align with the known scam type (fake exchange), creating potential confusion for victims. Multiple threat intelligence sources confirm malicious activity: the domain appears in four AlienVault OTX pulses and is blocked by at least two security blocklists. Google Safe Browsing classifies it under 'SOCIAL_ENGINEERING,' and 16 of 91 security vendors on VirusTotal flag it as malicious. The domain remains active, returning an HTTP 200 status, which may indicate ongoing operational use. Defenders should prioritize blocking this domain at the DNS and network levels, particularly in environments where cryptocurrency-related activity occurs. Given the mismatch between the page title and the reported scam type, further investigation is needed to determine if the site is part of a broader campaign or has been repurposed. No evidence of a phishing kit or additional infrastructure has been confirmed at this time.